Lucene search
MitreCVELIST:CVE-2020-26175HistoryDec 18, 2020 - 9:27 a.m.
CVE-2020-26175
2020-12-1809:27:05
mitre
www.cve.org
2
tangro business workflow
attacker manipulation
profile information.
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
24.8%
In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
Related
prion
prion
Design/Logic Flaw
2020-12-18 10:15:00
cve
cve
CVE-2020-26175
2020-12-18 10:15:13
nvd
nvd
CVE-2020-26175
2020-12-18 10:15:13
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
24.8%
Related for CVELIST:CVE-2020-26175